Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200730.roa
File: AS200730.roa (raw, json)
Hash identifier: /Es/poSZIVpHY5ouFL/dH9qduhvdWyVK+mfv9A5mKEU=
Subject key identifier: 20:94:03:BE:39:C9:46:8C:AE:5B:05:AB:AF:79:B8:3B:0F:08:4E:7A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 599E66ED4D84FF57DAB647AAAEDAE970FAE16491
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200730.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 200730
IP address blocks: 2a06:a005:116f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9e:66:ed:4d:84:ff:57:da:b6:47:aa:ae:da:e9:70:fa:e1:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=209403BE39C9468CAE5B05ABAF79B83B0F084E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:0a:ae:76:be:1d:71:6f:4d:93:6e:c3:a6:
07:97:9c:ac:1f:68:e9:7b:a2:dc:0e:01:02:00:f4:
15:c3:ab:b0:0c:18:7d:e0:c7:8a:93:e2:90:52:6f:
7e:cb:5c:f7:fe:52:3d:4f:cd:f6:e1:7b:4e:17:0c:
6d:19:2e:0d:a5:86:f6:00:d4:78:6f:b2:49:58:63:
6f:82:e0:f9:da:dd:ba:bf:6b:5f:b0:90:0b:eb:1b:
cf:00:fb:53:a3:8b:8c:22:77:b1:d9:8e:bf:8c:92:
1b:cf:b8:93:bc:6f:a2:24:1f:70:0d:f9:23:bf:a6:
2b:27:a1:19:b3:45:fb:83:f5:1e:46:7f:e0:98:f4:
aa:84:ea:1e:5e:3e:ab:ce:7d:6e:38:87:fe:99:94:
0b:dd:84:29:2d:0d:e7:34:27:43:0e:db:7d:80:ee:
69:3c:0d:5d:e8:8a:ef:b1:f3:bc:b6:22:a7:86:e8:
11:79:2f:fa:b7:11:8b:b7:f6:a0:59:42:c2:e5:95:
59:e4:e4:43:2d:ff:24:6e:a8:f6:23:a1:ca:9e:55:
65:cb:20:56:fc:40:81:a7:5c:1c:15:af:b4:03:53:
bb:b6:21:89:fa:31:da:3a:4b:37:dd:de:cb:72:95:
76:48:4c:4f:ee:d8:56:4b:40:f2:42:90:b9:37:b2:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:03:BE:39:C9:46:8C:AE:5B:05:AB:AF:79:B8:3B:0F:08:4E:7A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116f::/48
Signature Algorithm: sha256WithRSAEncryption
58:f2:5e:d8:cf:54:b8:fd:19:66:6f:ae:42:fb:e2:e4:ca:29:
a5:e2:7a:1d:00:9d:12:2c:87:68:e9:05:03:6b:a1:8c:27:7d:
0f:60:65:d6:b6:1d:b0:de:38:b3:6a:52:0e:9c:3f:89:c5:ae:
23:7e:69:f3:97:9a:01:7b:86:a0:c1:9c:78:d0:aa:52:ea:34:
8c:e4:78:39:15:f0:e9:ac:b0:71:8d:de:c8:51:4e:33:aa:34:
43:5d:fb:76:b6:b5:fd:8e:51:7d:e9:95:12:16:d4:ef:ee:45:
e4:fe:a3:8c:8d:78:ad:9a:92:b4:54:28:58:83:df:32:04:27:
91:b0:29:1f:ae:9b:52:1e:91:47:fa:a1:76:82:46:71:ef:07:
d8:e2:f2:b3:0a:6d:00:de:b0:be:1e:82:b8:55:f9:61:79:22:
43:8e:be:7c:62:b5:fa:a7:0d:5f:dc:ee:6c:b0:23:ac:78:e3:
e1:77:ae:52:8c:2d:5f:0e:0a:e1:8c:de:b3:8e:e2:bf:cb:38:
a6:b7:24:38:f6:bf:37:a7:5c:17:05:84:6e:63:a4:1f:bf:95:
27:5b:9c:50:45:52:fd:bc:c8:3a:04:b6:98:38:d2:5a:17:ff:
ba:e3:c4:8a:75:73:3c:3d:ea:b7:ef:28:33:1b:67:74:30:18:
10:6d:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:26 2025 by rpki-client